Security Engineer IV - Identity Systems Development

Edward Jones Privileged Access Management (PAM) Team Opportunity

Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society.

The Privileged Access Management (PAM) team is responsible for safeguarding the organization's most critical systems by securely managing and controlling elevated access across the enterprise. The team designs, operates, and enhances key PAM platforms, including credential vaulting solutions that protect, rotate, and audit privileged credentials while enforcing least-privilege access. In addition, the PAM team supports highly available and resilient infrastructure connectivity that enables secure, seamless access for our Financial Advisors and Home Office associates.

What You'll Do:

• Design, implement, and operate enterprise Privileged Access Management (PAM) solutions with a focus on CyberArk platforms (Enterprise Password Vault, Endpoint Privilege Manager, and Privileged Session Manager).
• Engineer and maintain secure credential vaulting solutions using CyberArk and HashiCorp Vault to protect, rotate, and audit privileged credentials across on-prem and cloud environments.
• Manage and enhance privilege elevation and delegation controls using BeyondTrust PowerBroker for Linux and other least-privilege enforcement technologies.
• Administer and govern enterprise web password management solutions ensuring secure onboarding, policy enforcement, and user adoption.
• Support highly available PAM infrastructure and connectivity that enables secure access for Financial Advisors and Home Office associates while maintaining performance, stability, and resilience.
• Partner with infrastructure, cloud, and application teams to integrate PAM controls into platforms, pipelines, and operational workflows.
• Develop automation, monitoring, and alerting to improve PAM reliability, reduce operational risk, and strengthen audit and compliance readiness.
• Serve as a senior technical escalation point for PAM-related incidents, problem management, and root-cause analysis.
• Contribute to security architecture, standards, and roadmaps, helping to evolve PAM capabilities in alignment with Zero Trust and enterprise security strategies.

What Experience You'll Need:

• 7+ years of experience in information security, infrastructure security, or identity and access management, with deep focus on Privileged Access Management.
• Hands-on engineering experience with CyberArk solutions, including EPV, EPM, and PSM in large-scale enterprise environments.
• Strong working knowledge of HashiCorp Vault, including secrets management, authentication methods, integration patterns, and operational best practices.
• Experience administering or supporting privilege management solutions such as BeyondTrust PowerBroker for Linux and enterprise password managers.
• Solid understanding of Linux systems, privilege escalation, sudoers, and service-based authentication models.
• Experience supporting highly available security platforms and infrastructure that serve distributed user populations.
• Proficiency with scripting and automation (e.g., PowerShell, Python, Bash) to improve efficiency and scale PAM operations.
• Strong understanding of security principles including least privilege, role-based access control, credential lifecycle management, and audit/compliance requirements.
• Ability to translate security requirements into practical, scalable technical solutions while partnering effectively with both technical and non-technical stakeholders.
• Preferred: Experience in financial services or other highly regulated environments.

Current INTERNAL home-based associates: While this role is posted as hybrid, if selected and accepted, you may retain your home-based status. Edward Jones intends in good faith to continue offering the role as home-based, though future business or regulatory needs may require on-site work. **Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday.** At Edward Jones, we are building a place where everyone feels like they belong.

Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law.

Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program.